Mmastodon TechnologyCybersecurity first seen 12 d ago, last 12 d ago, peak #12

North Korean fake job interviews targeting developers

Original: I spent the last few months reconstructing UNK_DeadDrop, a fake-job-interview campaign aimed at developers: ClickFix "ve

Researchers have reconstructed UNK_DeadDrop, a campaign targeting software developers with fake job interviews. The scheme uses ClickFix-style verification pages that secretly swap a malicious command into the victim's clipboard, take-home coding repositories that execute code when opened, and a malicious VS Code extension. The detailed reconstruction of the attack chain has drawn attention within the cybersecurity community.

Why now: A detailed technical reconstruction of a sophisticated developer-targeting malware campaign has just been published.

UNK_DeadDropClickFixVisual Studio Code

Open on mastodon →

Evidence

• I spent the last few months reconstructing UNK_DeadDrop, a fake-job-interview campaign aimed at developers: ClickFix "verification" pages that swap a command into your clipboard, take-home repos that run a task when the folder opens, and a malicious VS Code extension that uses… · iljakrasnjanski

API: https://socialmediatrends-api.osmike.com/v1/trends/4564834